PT-2010-1458 · Accellion · Accellion Secure File Transfer Appliance

Published 2010-02-19 · Updated 2017-08-17 · CVE-2009-4648

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Accellion Secure File Transfer Appliance versions prior to 8 0 105

Description The issue allows local administrators to gain privileges due to improper restriction of access to sensitive commands and arguments that run with extra sudo privileges. This can be achieved through arbitrary arguments in the --file move action in /usr/local/bin/admin.pl, or a hard link attack in chmod or a certain cp command.

Recommendations For Accellion Secure File Transfer Appliance versions prior to 8 0 105, update to version 8 0 105 or later to resolve the issue. As a temporary workaround, consider restricting access to the /usr/local/bin/admin.pl script and limiting the use of chmod and cp commands to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-4648

Affected Products

Accellion Secure File Transfer Appliance

References · 6

• 🔥 http://securityfocus.com/bid/38176 · Exploit
• 🔥 http://portcullis-security.com/338.php · Exploit
• 🔥 https://exploit-db.com/exploits/33623 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4648 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4648 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56248 · Note